Sqreen Blog - Page 18 of 18 - The Official Sqreen Blog

5 minute read
9 comments

One easy way to inject malicious code in any Node.js application

Vladimir
August 22, 2016

tl;dr This article describes a method of injecting arbitrary code in Node.js modules. It does not encourage unethical behavior. The chain used to include instances of modules can be tampered to…

View Post

3 minute read
6 comments

Embedding JavaScript into Python

Jb
August 2, 2016

TL; DR: v8.py PyMiniRacer brings a compiled V8 interpreter and a simple interface to the Python community: Our needs Sqreen needs a stable, performant and embeddable JavaScript solution for Python.…

View Post

Dev
Security

4 minute read
One comment

7 HTTP headers to secure your app for the busy web developer

Alexander
July 28, 2016

Modern web browsers offer a lot of security features aimed at protecting your users from a wide variety of threats such as malware installed on their device, hackers listening to…

View Post

From the Archive: Application security from the inside [Presentation at OWASP]

Jb
July 25, 2016

Today we are sharing a presentation that our CTO Jean-Baptiste Aviat did at the OWASP (Open Web Application Security Project) a couple of months ago. Hackers have several ways to…

View Post

Dev
Python

8 minute read
3 comments

Freeze your Python with str.encode and threads

Boris
July 12, 2016

While working on the sqreen.com Python agent, I discovered a rather nasty, but fun to analyse bug that lead me deep into Python internals. The nasty bug I was working…

View Post

4 minute read
One comment

Integrating Content Security Policy into your Rails applications

Jb
July 11, 2016

TL; DR Content Security Policy (CSP) is an HTTP response header that restricts the browser to loading external assets such as scripts, styles or media from a wide variety of…

View Post

5 minute read
No comments

App Security – The painful invisible challenge that we love to hate

Pierre
July 8, 2016

We fought on the security frontline at Apple for about ten years. Our mission was simple: to attack products using any means necessary and then work on the fixes with development…

View Post

Tune your App Performance (and get fit for summer)

Jb
July 8, 2016

Premature optimization is the root of all evil — Donald Knuth

View Post

Ruby on Rails Security in your Continuous Integration

Jb
July 7, 2016

Foundations of your development cycle “Never send a human to do a machine’s job ” — Agent Smith How open-source public tools can help improve your software security in your Continuous…

View Post

Dev
Security

0 minute read
No comments

The usual (git) flow of Developers Vs. Security

Pierre
July 7, 2016

View Post